WIP

ansible/vars/common.yml

@@ -0,0 +1,27 @@
+common:
+
+  certificates:
+    country_name: "FR"
+    locality_name: "Vannes"
+    organization_name: "iTik"
+    email_address: "ca@itik.fr"
+
+  consul:
+    domain: "itik.fr"
+    datacenter: "lab"
+
+  sites:
+    - name: "test"
+      site: "test.lab"
+      paths:
+        - addrs:
+            - "http://www1"
+            - "http://www2"
+            - "http://www3"
+      custom_cert: true
+      custom_cert_file: "/etc/ssl/certs/test.lab.crt"
+      custom_key_file: "/etc/ssl/private/test.lab.key"
+#     exceptions:
+#       before_request:
+#         - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:1,nolog,ctl:ruleRemoveById=932160"'
+#         - 'SecRule REQUEST_URI "@beginsWith /?bin/sh" "id:2,nolog,ctl:ruleRemoveById=932250"'

ansible/vars/secrets.yml

@@ -0,0 +1,13 @@
+$ANSIBLE_VAULT;1.1;AES256
+61643639653530613066383464333939383034643565386434616361653331656237303835653837
+3431646133336265393237383366653364373039376365340a396438643530383965343865383837
+62636338366437356661356561356138383032353133396461643362323536303965353564666232
+3735363038323139620a386364633933303139623436626337346535663737386264303036323866
+31303762336638313961383034386137376566383662323961336536303230303063396661333135
+66646133333565656233303461356166303862303037663133383534613263383130316261643738
+65656165346432636363393436646532643531393066346332326561656230316232383866643665
+36626333656335626534333737633231396561633831653464383036323431616431306433623139
+61346630663636313463376237353036343264613936366539393165623265656233303864386563
+63386661343061373930383139376666353035373531386230306432663132653130633039616665
+38383735326339353738383166623932316564636634343830326432613563306436666532313562
+65326431346639636338